求助，F1000-S防火墙NAT问题！！！！

我这里一台F1000-S，3个接口分别连接内网（eth0/0：trust）和外网（e0/1：untrust）以及DMZ区（e1/0：DMZ）。
4 n$ c" a0 s9 t" B% q2 A: x    我的环境比较特殊，DMZ区有多台服务器对外提供应用；而内网也有一些服务器，特别是DNS服务器在内网，DNS提供内网PC的域名解析以及对DMZ区的服务器的域名解析。就是外网用户访问DMZ区服务器也是通过内网的DNS服务器提供域名解析功能。我目前可以实现内网和外网访问intelnet，以及内网通过IP地址（包括私有地址和公网映射地址）对DMZ区的访问。
    但是内网用户无法通过域名解析访问DMZ区的服务器，外网用户也只能通过公网映射地址访问DMZ服务器，而无法用过域名访问。
    另外，我感觉在外网口附加上公网映射地址好像没有什么作用。实际访问时好像访问的是防火墙，而不是服务器。
- u; ?8 j2 f3 |' h    以下是我防火墙的配置，麻烦大家帮忙看看，怎么解决以上问题。（DNS 服务器为172.30.1.1 ）
' j5 s4 `; ?* g" a1 r
#
sysname H3C
+ l4 v6 Y% d9 F#
firewall packet-filter enable
firewall packet-filter default permit
* h+ K! e  _' y#
# V3 K; U! Z- fnat address-group 1 10.10.61.86 10.10.61.94
2 U7 v4 Q  s9 v1 U#
firewall statistic system enable
#
radius scheme system
$ a& V* g& l5 g0 B: n3 _server-type extended
. I  n: P  E4 ?#
domain system
#
6 f2 m% I4 U1 V* E" clocal-user admin
password cipher [ZW_)V:R.]7=3S**GNA"_Q!!
0 v7 B) h: K# p) \1 {6 A; qservice-type telnet
level 3
#
object address all 0.0.0.0 0.0.0.0
object address dmz 192.168.100.0 255.255.255.0
object address inside 172.16.0.0 255.240.0.0
% k5 |. T3 L1 m9 z( n! D#
acl number 2000
2 }8 s$ l! {$ ?8 M$ brule 0 permit
rule 1 deny
#
inte**ce Aux0
; Z; n5 b  u+ a( r$ u6 Q& rasync mode flow
#
inte**ce GigabitEthernet0/0
3 a/ F7 j$ `/ L5 N1 Ydescription WCN_INTE**CE_LAN
ip address 172.31.2.2 255.255.255.248
nat server protocol tcp global 10.10.61.77 any inside 192.168.100.3 any
nat server protocol tcp global 10.10.61.75 any inside 172.30.1.1 any
, l3 \( I' d! d5 ]nat server protocol tcp global 10.10.61.67 any inside 192.168.100.112 any
/ F: w9 }2 K% Cnat server protocol tcp global 10.10.61.70 any inside 192.168.100.32 any
nat server protocol tcp global 10.10.61.79 any inside 192.168.100.100 any
3 x8 p- ]! c: s$ Wnat server protocol tcp global 10.10.61.74 any inside 172.30.1.4 any
nat server protocol tcp global 10.10.61.68 any inside 192.168.100.60 any
' a+ R3 z* y. x/ O: i- c: B& Anat server protocol tcp global 10.10.61.78 any inside 172.22.1.5 any
/ }0 k; J' K, lnat server protocol tcp global 10.10.61.80 any inside 172.16.51.189 any
& A0 P2 H+ |0 {6 {/ O! v2 ?: bnat server protocol tcp global 10.10.61.81 any inside 172.16.51.182 any
. W+ Q4 ~/ ?. |1 inat server protocol tcp global 10.10.61.82 any inside 172.30.100.150 any
: V+ l, H+ e8 z9 y& k8 Znat server protocol tcp global 10.10.61.72 any inside 172.30.102.53 any
nat server protocol tcp global 10.10.61.73 any inside 172.21.144.253 any
nat server protocol tcp global 10.10.61.76 www inside 172.23.129.199 www
2 I; R8 M; H. dnat server protocol tcp global 10.10.61.76 8001 inside 172.23.129.2 8001
#
0 s# w5 ~2 m5 S7 c. Ginte**ce GigabitEthernet0/1
description WCN_INTE**CE_WAN
; J" C, g; i2 V* iip address 10.10.61.66 255.255.255.224
ip address 10.10.61.77 255.255.255.224 sub
7 r, F2 F) ?8 oip address 10.10.61.75 255.255.255.224 sub
ip address 10.10.61.67 255.255.255.224 sub
ip address 10.10.61.70 255.255.255.224 sub
: ^* G" p9 y6 e( I0 sip address 10.10.61.79 255.255.255.224 sub
ip address 10.10.61.74 255.255.255.224 sub
ip address 10.10.61.68 255.255.255.224 sub
* J. c  M7 e( z% [* E, l, D* Fip address 10.10.61.78 255.255.255.224 sub
ip address 10.10.61.80 255.255.255.224 sub
ip address 10.10.61.81 255.255.255.224 sub
ip address 10.10.61.82 255.255.255.224 sub
ip address 10.10.61.72 255.255.255.224 sub
ip address 10.10.61.73 255.255.255.224 sub
ip address 10.10.61.76 255.255.255.224 sub
% n$ ^' b. _. W$ G; j2 S. f) lnat outbound 2000 address-group 1
nat server protocol tcp global 10.10.61.77 any inside 192.168.100.3 any
nat server protocol tcp global 10.10.61.75 any inside 172.30.1.1 any
- \0 q2 h. T1 V; vnat server protocol tcp global 10.10.61.67 any inside 192.168.100.112 any
nat server protocol tcp global 10.10.61.70 any inside 192.168.100.32 any
8 A0 M4 _# s# x& S* W; tnat server protocol tcp global 10.10.61.79 any inside 192.168.100.100 any
5 i6 U8 I9 C6 |4 P/ a; Z2 Q4 Fnat server protocol tcp global 10.10.61.74 any inside 172.30.1.4 any
nat server protocol tcp global 10.10.61.68 any inside 192.168.100.60 any
" A! D' h8 V# O+ a& Wnat server protocol tcp global 10.10.61.78 any inside 172.22.1.5 any
nat server protocol tcp global 10.10.61.80 any inside 172.16.51.189 any
nat server protocol tcp global 10.10.61.81 any inside 172.16.51.182 any
( R: F) d' ]. y: C$ R* knat server protocol tcp global 10.10.61.82 any inside 172.30.100.150 any
nat server protocol tcp global 10.10.61.72 any inside 172.30.102.53 any
nat server protocol tcp global 10.10.61.73 any inside 172.21.144.253 any
nat server protocol tcp global 10.10.61.76 www inside 172.23.129.199 www
nat server protocol tcp global 10.10.61.76 8001 inside 172.23.129.2 8001
; L, ?) u( S5 f#
inte**ce GigabitEthernet1/0
description WCN_INTE**CE_DMZ
* Y; m3 R, n% t2 f7 \ip address 192.168.100.254 255.255.255.0
( B9 N3 ^$ v2 x% K#
inte**ce GigabitEthernet1/1
#
inte**ce Encrypt2/0
& C- \0 C% X2 z7 a# j- a4 T% W/ ]#
! ?' p/ I) @) t4 }. p- W, {inte**ce NULL0
#
" D$ r( z& k  r5 \3 h# j* \# f7 Gfirewall zone local
# z( y! q/ W# Y5 n# c0 E- ]set priority 100
#
$ r* k. m3 j: v. C" X& Dfirewall zone trust
9 o$ c1 ?. ~3 ]4 `1 eadd inte**ce GigabitEthernet0/0
+ k( o5 M+ t+ X* Q3 [add inte**ce GigabitEthernet1/1
5 s& [$ ^$ E# p4 X$ S% `set priority 85
#
/ a2 W) J9 Z( m0 m8 Y0 vfirewall zone untrust
add inte**ce GigabitEthernet0/1
# g/ Z' j/ f  L" w9 ]9 ]set priority 5
: s/ j9 W8 R3 K#
firewall zone DMZ
# P' y3 l7 H7 R' n, A" l. Xadd inte**ce GigabitEthernet1/0
set priority 50
#
firewall interzone local trust
#
firewall interzone local untrust
#
firewall interzone local DMZ
#
firewall interzone trust untrust
4 W/ v8 D0 {/ k4 b' |: S2 h#
1 j' j. |1 V8 I$ Yfirewall interzone trust DMZ
' \5 R0 S$ r. I8 k' S8 u#
firewall interzone DMZ untrust
#
ip route-static 0.0.0.0 0.0.0.0 GigabitEthernet 0/1 10.10.61.65  preference 60
! U& S: w- x( K4 }/ qip route-static 172.16.0.0 255.240.0.0 GigabitEthernet 0/0 172.31.2.1  preference 60
#
+ }% m& R; @6 Q4 D- |6 q- y& @user-inte**ce con 0
user-inte**ce aux 0
user-inte**ce vty 0 4
+ q$ U2 b$ ~% \+ p" z# R; X#
* W' b5 \/ I/ D8 m# t9 m8 @6 m  c* @return